Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31392d3139203d3e203130323137.roa
File: 3131392e31312e3132382e302f31392d3139203d3e203130323137.roa (raw, json)
Hash identifier: qXwnlaB+Z8VrOtOQXVzYtInPBVapT72PNE57OsCXcXo=
Subject key identifier: F0:F2:F6:72:D1:C0:B9:33:5B:9F:22:A3:37:E0:ED:77:57:9A:35:6E
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 7BDB686A783970A1827E534BB572236ACC79E2F0
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31392d3139203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:13:09 +0000
ROA not before: Wed 22 Nov 2023 08:08:09 +0000
ROA not after: Wed 20 Nov 2024 08:13:09 +0000
asID: 10217
IP address blocks: 119.11.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:db:68:6a:78:39:70:a1:82:7e:53:4b:b5:72:23:6a:cc:79:e2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:08:09 2023 GMT
Not After : Nov 20 08:13:09 2024 GMT
Subject: CN=F0F2F672D1C0B9335B9F22A337E0ED77579A356E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:18:79:0d:f6:ff:92:a0:b6:ee:11:1e:60:
6c:89:a1:91:f1:ce:44:e7:a7:4a:01:34:12:29:a2:
2e:2e:d4:af:0c:41:8a:b7:b0:4a:4c:35:8c:40:9d:
cf:57:ca:b1:50:6e:fb:2f:d3:22:c7:06:88:0a:60:
77:3c:47:50:e0:bd:c5:62:fc:ba:2e:ce:c2:19:67:
dd:49:25:c7:f1:37:2a:3b:d3:a4:8e:14:08:33:53:
ff:72:05:12:30:ad:d1:05:49:39:1a:e5:37:6e:73:
9b:46:1d:c4:63:54:93:9e:2c:e2:a1:1b:00:c9:1b:
e4:99:2c:e2:e4:bd:f3:02:86:1a:5a:7b:0e:a2:7d:
57:58:9c:3c:e8:84:89:2a:1a:84:2c:36:91:c9:f9:
2f:5b:d0:4c:9e:aa:92:18:3a:6b:bc:41:ae:db:74:
43:e2:e5:39:dd:e1:cd:aa:9f:1c:6c:17:e9:91:ba:
e8:64:53:5e:6c:a2:c5:c1:47:85:ef:a6:01:08:75:
7e:98:d0:f2:6a:26:49:7d:8f:b0:0c:8e:3b:80:9f:
53:5b:b2:df:c2:24:ad:14:5b:bd:ab:87:a1:7a:68:
96:08:f8:0c:c7:84:2f:b4:2a:b3:6b:b7:4a:02:a5:
5d:9c:9c:31:41:ff:24:01:41:6a:2b:c2:61:e3:37:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:F6:72:D1:C0:B9:33:5B:9F:22:A3:37:E0:ED:77:57:9A:35:6E
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31392d3139203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.128.0/19
Signature Algorithm: sha256WithRSAEncryption
86:e5:a6:56:fc:41:06:7f:63:a8:c4:41:0f:6b:2c:4c:5a:fa:
11:88:93:46:30:66:0d:bd:59:67:8c:75:ab:ab:10:55:0a:bd:
27:3c:65:fb:30:e0:3a:80:cb:1d:6b:7b:45:9a:9f:b9:b7:8e:
ee:5d:fb:88:dd:8a:5c:72:79:f3:10:61:79:25:3f:8a:2d:e6:
cb:95:95:ab:bb:1a:d2:02:c1:ee:ea:96:8c:82:3c:a4:e4:22:
44:e0:a0:92:96:ad:7d:dc:d5:8e:cf:7b:db:4e:d3:7c:71:87:
fa:c3:ed:e8:52:50:44:ce:aa:e4:5a:6e:d6:f9:ce:f5:51:bf:
10:d8:84:f3:8d:09:48:93:3c:42:95:85:fc:34:b8:33:22:9c:
33:c2:71:3a:2c:72:83:9f:97:48:fd:d2:69:07:1d:48:b7:f6:
89:2b:23:e7:d0:9b:b3:75:54:8b:14:f6:40:a3:54:ec:40:b2:
23:ec:cd:fa:2d:c3:0b:a5:e1:9e:1e:fe:c7:2e:c5:d4:61:15:
25:ba:f2:9c:01:4c:63:23:a8:47:3f:95:cb:7f:d0:0c:43:83:
fb:b2:61:b6:f6:c5:01:ec:40:86:0b:2e:58:0e:59:95:cc:a1:
00:0b:14:6d:71:6f:71:72:e2:f0:c8:10:6b:e2:d1:b1:d8:38:
b2:2c:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org